pursuant to Article 13 of Regulation (EU) 2016/679

Data subjects: visitors to the website www.cimesgroup.it

This document is intended to inform visitors to this website, pursuant to Article 13 of Regulation (EU) 2016/679 (hereinafter, the “Regulation” or “GDPR”), about the processing of their personal data collected or received while using the website.

Detailed information on the processing of personal data is provided, where necessary, in the sections relating to the various processing activities carried out. The data used or requested, the purposes of each processing activity, and the retention period are indicated. Where required, the visitor may freely provide consent and authorize the collection and use of their data.

Please note that this privacy policy applies to this website only and does not apply to any other websites that may be consulted by the user via links on this website; for those, please refer to the privacy information provided by the respective websites.

Cimes srl, with registered office at Via Romano Guastalla, 4/A – Località Croce del Gallo – 46029 Suzzara, Mantova (MN), is the Data Controller for the processing of personal data collected and obtained through this website and determines how the data will be stored and who may have access to the information collected through the website. Personal data will be processed using manual and automated procedures; all processing is carried out in compliance with Articles 6 and 32 of the Regulation and by adopting the appropriate security measures required. Data will be processed only by personnel expressly authorized by the Data Controller, or also by third parties acting as Data Processors for the relevant processing activities pursuant to Article 28 of the Regulation. Further information on data processors and authorized persons will be provided upon request by the data subject in exercising the rights set out in Articles 15–22 of the Regulation.

Types of data processed

While browsing the website, the following information about the visitor may be collected:

Browsing data

The IT systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes: IP addresses, the type of browser used, the operating system, the domain name and addresses of the websites from which access was made or to which the user exited, information on the pages visited by users within the website, access time, analysis of the internal navigation path, and other parameters relating to the user’s operating system and IT environment. Such technical/IT data are collected and used exclusively in an aggregated, non-identifying manner for technical and statistical analysis of website use; they may also be used to ascertain liability in the event of hypothetical cybercrimes against the website.

Data provided in the “CONTACTS” form

This refers to the personal data freely provided by the visitor on the website, on the specific page containing the form to be filled in to request information about our products or services. The following are required: first name, last name, email address. The data will be used for the following purpose:

• to send the requested information about our products or services.

The data will be retained in accordance with the principles of lawfulness, purpose limitation, and data minimization pursuant to Article 5 of the GDPR, for the time necessary to fulfil the user’s request.

Data provided in the “NEWSLETTER” form

This refers to the personal data freely provided by the visitor on the website, on the specific page containing the form to register and receive the newsletter email. The following are required: first name, last name, email address. Providing such data is optional and does not limit browsing of the website. After consent is obtained, the collected data will be used for the following purposes:

• to send the newsletter email with information and updates on products and services.

The data will be retained in accordance with the principles of lawfulness, purpose limitation, and data minimization pursuant to Article 5 of the GDPR, until the user requests removal by following the instructions specified within the newsletter email; permanent deletion will take place within 30 days of the request.

Cookies

For more information on the use of cookies on this website, please see the Cookie Policy at this link.

Collection of the data subject’s consent

Free, informed and specific consent is required only for completing forms in which the visitor’s personal data are requested for the stated purposes. Consent is provided by the data subject by ticking the dedicated box; sending the request with the data is not possible without first providing consent, which is recorded and retained by the Data Controller for the purposes of producing it upon request by the data subject or the Authority.

Links to/from third-party websites

This website may contain links to other third-party websites. The website’s Data Controller declines any responsibility regarding the possible processing of personal data by websites other than this one. For information on the purposes, type and methods of collection, processing, use and retention of personal data by the visited website, as well as on how to exercise one’s rights, please consult the privacy notice of the visited website.

Disclosure

The personal data collected are not and will not be disclosed.

EXERCISE OF THE DATA SUBJECT’S RIGHTS

To exercise the rights guaranteed by the above-mentioned articles, please contact the Data Controller: Cimes srl – Via Romano Guastalla, 4/A, Località Croce del Gallo, 46029 Suzzara, Mantova (MN) – email: info@cimesgroup.it

The data subject has the right to obtain erasure, communication, updating, rectification, and integration of the personal data concerning them, and may in general exercise all the rights provided for by Articles 15 to 22 of the GDPR at this link.

Changes to the Privacy Policy

Changes to the website for new personal data processing activities, the possible entry into force of new sector regulations, as well as the ongoing review and updating of services for users, may require this notice to be updated. Our policy may change over time; therefore, visitors are invited to consult this page periodically.